Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
VisitArkime vs EndaceVision
EndaceVision
5.3#20 in network packet capture softwareWeb
VisitWhat both publish
| Fact | Arkime | EndaceVision |
|---|---|---|
| Founded | 2012 | 2001 |
| Integrations | Arkime uses OpenSearch or Elasticsearch for indexed metadata and offers WISE threat-intelligence integration. | Endace says Cisco Secure Network Analytics can link alerts to related packet-level Network History in EndaceVision. |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | EndaceVision is a browser-based application for investigating security threats and network or application performance issues using historical packet data. |
| Security controls | Arkime supports TLS for the viewer, digest authentication, reverse-proxy authentication, OpenSearch credentials and API keys. | The EndaceVision datasheet lists support for role-based access control and TACACS security. |
Arkime plans
- ArkimeFree
EndaceVision plans
- EndaceVisionPriced on request
Pick Arkime if…
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
Pick EndaceVision if…
EndaceVision suits security, network, and IT teams investigating threats or troubleshooting network and application performance using recorded packet data. Its included availability is tied to EndaceProbe Analytics Platforms and InvestigationManager.